Lincoln National (LNC) Risk Analysis

We are, and in the future may be, subject to legal and regulatory actions in the ordinary course of our business. Pending legal and regulatory actions include proceedings relating to aspects of our businesses and operations that are specific to us and proceedings that are typical of the businesses in which we operate. Some of these legal proceedings have been brought on behalf of various alleged classes of complainants. In certain of these matters, the plaintiffs are seeking large and/or indeterminate amounts, including punitive or exemplary damages. Substantial legal liability in these or future legal or regulatory actions could have a material financial effect or cause significant harm to our reputation, which in turn could materially harm our business prospects. See Note 17 for a description of legal and regulatory proceedings and actions.

Changes in tax laws or interpretations of such laws could increase our corporate taxes and negatively impact our results of operations and financial condition. Federal, state and local tax authorities may enact changes in tax law, issue new regulations or other pronouncements or issue interpretations of existing tax laws that could increase our current tax burden and impose new taxes on our business, or authorities who have not imposed taxes in the past may impose taxes. Any attempts to avoid or mitigate such new taxes or interpretations may not be successful and could result in an increase to our tax liability. Guidance on previously enacted tax law changes could impact our interpretations of existing law and also have an impact on our business. See Note 17 for a discussion of our current tax assessment proceeding. In August 2022, the Inflation Reduction Act of 2022 established a new 15% corporate alternative minimum tax for corporations whose average adjusted net income for any consecutive three-year period beginning after December 31, 2022, exceeds $1.0 billion. This provision became effective for tax years beginning after December 31, 2022. While we have determined that we were not within the scope of the corporate alternative minimum tax for 2023 or 2024, we will continue to evaluate the potential impact of this new alternative minimum tax on our business, results of operations and financial condition in future periods. See also "Item 1. Business – Regulatory – Other Federal Legislation – Tax Legislation."

Our success depends, in large part, on our ability to attract and retain qualified employees. Intense competition exists for employees with demonstrated ability, and the competition for talent has increased in recent years. In addition, opportunities to work remotely have expanded the reach of recruiters and options for employees. As a result of this competition, we may be unable to hire or retain the qualified employees we need to support our business. Further, the unexpected loss of services of one or more of our key employees could have a material adverse effect on our operations due to their skills, knowledge of our business, their years of industry experience and the potential difficulty of promptly finding qualified replacement employees. We compete with other financial institutions primarily on the basis of our products, compensation, support services and financial condition. Sales in our businesses and our results of operations and financial condition could be materially adversely affected if we are unsuccessful in attracting and retaining employees, including wholesalers, as well as independent distributors of our products.

Third parties perform significant services on our behalf, and, in recent years, consistent with competitor practices, we have increased our level of outsourcing to third parties for the execution of certain of our business operations, including certain customer service operations and certain system functionality (e.g., build and maintenance). Our third-party service providers and vendors are subject to the same or similar risks as we are, including information system interruptions, breaches in security, failure of disaster recovery systems, and inadequate data management or privacy protections. The failure of such third parties' computer systems and/or their disaster recovery plans for any reason might cause significant interruptions in our operations and result in a failure to maintain the security, confidentiality or privacy of sensitive data, including personal information relating to our customers. Although we conduct due diligence, negotiate contractual provisions and, in many cases, conduct periodic reviews of our vendors and other third party suppliers with whom we contract and who we believe may pose a cybersecurity threat to the Company, our customers or our business partners due to the type of services they provide and/or confidential information they may be handling to confirm compliance with our information security standards, we may not be able to effectively monitor or mitigate the information security and privacy risks posed by such third parties. Such third parties' computer systems have in the past been, and will likely in the future be, subject to or targets of unauthorized or fraudulent access; however, to date, our business, financial condition and results of operations have not been materially affected by such a cybersecurity incident at a third party. The occurrence of such a failure, interruption or security breach of the systems of third parties could harm our reputation, subject us to regulatory sanctions and legal claims, lead to a loss of customers, clients, agents and revenues and otherwise adversely affect our business and financial results. In addition, one or more of our third-party suppliers or vendors may experience an operational disruption and, if any such event does occur, it may not be adequately addressed, either operationally or financially, by the third party. Certain of our third-party vendors and suppliers may have limited indemnification obligations or may not have the financial capacity to satisfy their indemnification obligations. Financial or operational difficulties of a vendor could also impair our operations if those difficulties interfere with the vendor's ability to serve us. Additionally, some of our outsourcing arrangements are located overseas and, therefore, are subject to risks unique to the regions in which they operate. If a critical vendor, or critical number of vendors, is unable to meet our needs in a timely manner, if the services provided by such a vendor or vendors are terminated or otherwise delayed and if we are not able to develop alternative sources for these services quickly and cost-effectively, or if we are not able to cost-effectively maintain or renew our contracts with such vendor or vendors, it may adversely affect our business and financial results.

Our results of operations are materially affected by conditions in the global capital markets and the economy generally, both in the U.S. and elsewhere around the world. Major central bank policy actions, inflation, recessionary conditions and political policy uncertainty remain key challenges for markets and our business. These macro-economic conditions have in the past and may in the future have an adverse effect on us given our credit and equity market exposure. In the event of extreme prolonged market events, such as the global credit crisis and recession that occurred during 2008 and 2009, we could incur significant losses. Even in the absence of a market downturn, we are exposed to substantial risk of loss and ratings downgrades due to market volatility. Factors such as consumer spending, business investment, domestic and foreign government spending, the volatility and strength of the capital markets, the potential for inflation or deflation and uncertainty over domestic and foreign government actions all affect the business and economic environment and, ultimately, the amount and profitability of our business. In an economic downturn characterized by inflation, recessionary conditions, higher unemployment, lower disposable income, lower corporate earnings, lower business investment and lower consumer spending, the demand for our financial and insurance products could be adversely affected. In addition, we have at times experienced, and in the future could experience, an elevated incidence of claims and/or changes in the rate of lapses or surrenders of policies or other changes in consumer behavior as a result of financial stress. Our contract holders may choose to defer paying insurance premiums or stop paying insurance premiums altogether. Adverse changes in the economy have in the past and could in the future affect earnings negatively and could have a material adverse effect on our business, results of operations and financial condition.

Our insurance operations are exposed to the risk of catastrophic mortality and morbidity, such as that caused by a pandemic, an act of terrorism, natural disaster or other event that causes a large number of deaths, injuries or illnesses. In addition, in our group insurance operations, an event that affects the workplace of one or more of our group insurance customers, such as a pandemic or a natural disaster, could also cause a significant loss due to concentrated mortality or morbidity claims. For example, due to the COVID-19 pandemic that emerged in the first quarter of 2020, we experienced higher mortality claim payments due to an elevation in claim incidence. In addition, we experienced an increase in short-term and long-term disability claims related to the pandemic that negatively impacted our earnings. The likelihood, timing or severity of a future pandemic or other catastrophe cannot be predicted. Additionally, the impact of climate change has caused, and may continue to cause, changes in weather patterns, resulting in more severe and more frequent natural disasters such as forest fires, hurricanes, tornados, floods and storm surges. Future pandemics or other catastrophic events could cause a material adverse effect on our results of operations in any period and, depending on their severity, could also materially and adversely affect our financial condition. The extent of losses from a catastrophe is a function of both the total amount of insured exposure in the area affected by the event and the severity of the event. Pandemics, natural disasters and man-made catastrophes, including terrorism, may produce significant damage in larger areas, especially those that are heavily populated. Although our investment, product and physical exposures are diversified (e.g., geographically), reducing the enterprise impact to catastrophic events, claims resulting from natural or man-made catastrophic events could cause substantial volatility in our financial results for any fiscal quarter or year and could materially reduce our profitability or harm our financial condition. Also, catastrophic events could harm the financial condition of our reinsurers and thereby increase the probability of default on reinsurance recoveries. Accordingly, our ability to write new business could also be affected. Consistent with industry practice and accounting standards, we establish liabilities for claims arising from a catastrophe only after assessing the probable losses arising from the event. We cannot be certain that the liabilities we have established or applicable reinsurance will be adequate to cover actual claim liabilities, and a catastrophic event or multiple catastrophic events could have a material adverse effect on our business, results of operations and financial condition.

In the event that our current sources of liquidity do not satisfy our needs, we may have to seek additional financing. The availability of additional financing will depend on a variety of factors such as market conditions, the general availability of credit, the volume of trading activities, the overall availability of credit to the financial services industry, our credit ratings and credit capacity, as well as the possibility that customers or lenders could develop a negative perception of our long- or short-term financial prospects if we incur large investment losses or if the level of our business activity decreases due to a market downturn. Similarly, our access to funds may be impaired if regulatory authorities or rating agencies take negative actions against us. See "Liquidity and Capital Resources – Ratings" in the MD&A for a description of our credit ratings. Our internal sources of liquidity may prove to be insufficient, and in such case, we may not be able to successfully obtain additional financing on favorable terms, or at all. Disruptions, uncertainty or volatility in the capital and credit markets may also limit our access to capital required to operate our business, most significantly our insurance operations. Such market conditions may limit our ability to replace, in a timely manner, maturing liabilities; satisfy statutory capital requirements; generate fee income and market-related revenue to meet liquidity needs; and access the capital necessary to grow our business. As such, we may be forced to delay raising capital, issue shorter term securities than we prefer or bear an unattractive cost of capital which could decrease our profitability and significantly reduce our financial flexibility. Our results of operations, financial condition, cash flows and statutory capital position could be materially adversely affected by disruptions in the financial markets.

We may have to litigate to enforce and protect our intellectual property, which represents a diversion of resources that may be significant and may not prove successful. The loss of intellectual property protection or the inability to secure or enforce the protection of our intellectual property assets could have a material adverse effect on our business and our ability to compete. We also may be subject to costly litigation in the event that another party alleges our operations or activities infringe upon another party's intellectual property rights. If we were found to have infringed a third-party patent or other intellectual property rights, we could incur substantial liability, and in some circumstances could be enjoined from providing certain products or services to our customers, or alternatively could be required to enter into costly licensing arrangements with third parties, all of which could have a material adverse effect on our business, results of operations and financial condition.

Our information systems are critical to the operation of our business. We collect, process, maintain, retain and distribute large amounts of personal financial and health information and other confidential and sensitive data about individuals with whom we interact in the ordinary course of our business. Our business therefore depends on the public's willingness to entrust us with their personal information. Any failure, interruption or breach in security could result in disruptions to our critical systems and adversely affect these relationships. In addition, our flexible hybrid work model, which allows the majority of our employees to work remotely on a regular basis, could increase our operational risk in these areas, including, but not limited to, cybersecurity risks, discussed further below. Publicly reported cybersecurity vulnerabilities, threats and incidents have increased over recent periods, including a proliferation of ransomware attacks, nation-state remote technology worker fraud and AI-enhanced cyberattacks. Although our computer systems have in the past been, and will likely in the future be, subject to or targets of unauthorized or fraudulent access, to date, we have not had a material security breach. While we employ a robust and tested information security program, the preventative actions we take to reduce the incidence and severity of cyber incidents and protect our information technology may be insufficient to prevent physical and electronic break-ins, cyberattacks, including ransomware, malware and enhanced-AI attacks, attacks targeting or impersonating remote workers, compromised credentials, fraud, other security breaches or other unauthorized access to our computer systems, and, given the increasing sophistication of cyberattacks, in some cases, such incidents could occur and persist for an extended period of time without detection. As a result, there can be no assurance that any such failure, interruption or security breach will not occur or, if any does occur, that it will be detected in a timely manner or that it can be sufficiently remediated. Such an occurrence may impede or interrupt our business operations, adversely affect our reputation or lead to increased expense, any of which could adversely affect our business, financial condition and results of operations. In the event of a disaster such as a natural catastrophe, pandemic, epidemic, industrial accident, blackout, computer virus, terrorist attack, cyberattack or war, unanticipated problems with our disaster recovery systems could have a material adverse impact on our ability to conduct business and on our results of operations and financial condition, particularly if those problems affect our computer-based data processing, transmission, storage and retrieval systems and destroy valuable data. In addition, in the event that a significant number of our managers were unavailable following a disaster, our ability to effectively conduct business could be severely compromised. These interruptions also may interfere with our suppliers' ability to provide goods and services and our employees' ability to perform their job responsibilities. The failure of our computer systems and/or our disaster recovery plans for any reason could cause significant interruptions in our operations and result in a failure to maintain the security, confidentiality or privacy of sensitive data, including personal information relating to our customers. The occurrence of any such failure, interruption or security breach of our systems could damage our reputation, result in a loss of customer business, subject us to additional regulatory scrutiny, or expose us to civil litigation and financial liability. Depending on the nature of the information compromised, in the event of a data breach or other unauthorized access to our customer data, we may also have obligations to notify affected individuals about the incident, and we may need to provide some form of remedy,such as a subscription to a credit monitoring service, for the individuals affected by the incident. For more information, see "Legislative, Regulatory and Tax – State Regulation – Compliance with existing and emerging privacy laws and regulations could result in increased compliance costs and/or lead to changes in business practices and policies, and any failure to protect the confidentiality of personal information could adversely affect our reputation and have a material adverse effect on our business, financial condition and results of operations." Finally, our cyber liability insurance may not be sufficient to protect us against all losses resulting from any cyberattack or other interruption, breach in security or failure of our disaster recovery systems. For more information on our cybersecurity risk management and strategy and governance, see "Item 1C. Cybersecurity." We are also subject to information security laws and regulations that impose governance and compliance obligations applicable to our business. For more information, see "Item 1. Business – Regulatory – Privacy, Artificial Intelligence and Cybersecurity Regulation."

Our businesses are intensely competitive. We compete based on a number of factors, including name recognition, service, investment performance, product features, price, perceived financial strength and claims-paying and credit ratings. Our competitors include insurers, broker-dealers, asset managers, hedge funds and other financial institutions. A number of our business units face competitors that have greater market share, offer a broader range of products or have higher financial strength or credit ratings than we do. In recent years, there has been consolidation and convergence among companies in the financial services industry resulting in increased competition from large, well-capitalized financial services firms. Many of these firms also have been able to increase their distribution systems through mergers or contractual arrangements. Furthermore, larger competitors may have lower operating costs and an ability to absorb greater risk while maintaining their financial strength ratings, thereby allowing them to price their products more competitively. Our customers and clients may engage other financial service providers, and the resulting loss of business may harm our results of operations or financial condition.

We distribute our annuity and life insurance products through independent sales representatives and other intermediaries. These representatives are not captive, which means they may also sell our competitors' products. If our competitors offer products that are more attractive than ours or pay higher commission rates to the sales representatives than we do, these representatives may concentrate their efforts in selling our competitors' products instead of ours.